Re: User permissions

From: Jeff Eckermann <jeff_eckermann(at)yahoo(dot)com>
To: "Lars Preben S(dot) Arnesen" <l(dot)p(dot)arnesen(at)usit(dot)uio(dot)no>, Doug McNaught <doug(at)wireboard(dot)com>
Cc: pgsql-general(at)postgresql(dot)org
Subject: Re: User permissions
Date: 2002-03-14 17:45:53
Message-ID: 20020314174553.26088.qmail@web20809.mail.yahoo.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-general

If you can find the earlier thread, you will see that
the feature you need has already been added to 7.3
development code. You may be able to patch that into
your 7.2 installation. A participant in that
discussion has probably already tested it.

--- "Lars Preben S. Arnesen" <l(dot)p(dot)arnesen(at)usit(dot)uio(dot)no>
wrote:
> [ Doug McNaught ]
>
> > We had a nice little flamewar about this a few
> weeks ago. ;)
>
> OK. I'll look into the arguments in the war...
>
> > The "Postgres" way to do it is to lock the
> unprivileged user out of
> > the "real" tables, and create views for that user
> to access. The
> > views can include only the fields that you want
> them to see, and you'd
> > create ON INSERT/DELETE/UPDATE rules to validate
> input and write to
> > the actual tables.
>
> Hmmm. I'm not going to start another flame war, but
> I think this seems
> like it could be somewhat easier with the Oracle
> solution (at least
> what I have heard from Oracle-users) that enables
> you to restrict a
> database user only to execute predefined functions.
>
> As I understand it I need to create functions, views
> and triggers to
> get what I want.
>
> > This is kind of a different way of thinking about
> it than the "proxy
> > functions" concept but you should be able to do
> everything you want to
> > do.
>
> With programming, everything is possible. :)
>
> --
> Lars Preben
>
> ---------------------------(end of
> broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please
> send an appropriate
> subscribe-nomail command to majordomo(at)postgresql(dot)org
> so that your
> message can get through to the mailing list cleanly

__________________________________________________
Do You Yahoo!?
Yahoo! Sports - live college hoops coverage
http://sports.yahoo.com/

In response to

Browse pgsql-general by date

  From Date Subject
Next Message Bruce Momjian 2002-03-14 18:17:07 Re: pgmonitor
Previous Message Joey Mingrone 2002-03-14 17:38:15 problem authenticating with encrypted passwords in pg_shadow